Privacy Policy

Last updated: July 2026

This policy explains how EnderHaven handles information when you use the website.

Information we collect

Depending on how you use the service, we may process:

• Account details such as username, display name, email address, profile image, and authentication provider identifiers
• Creator and seller application information
• Project metadata, files, images, descriptions, wiki content, and team membership
• Order references, selected plan, payment status, license period, refunds, and payout records
• Security and technical data such as IP-derived records, user agent, login events, download events, and error logs
• Messages, reports, support requests, and moderation history

Payment information

Payment card and banking details are generally collected directly by the payment provider. EnderHaven stores the references and status information required to match payments with orders, licenses, refunds, and creator revenue. We do not ask users to send full card numbers or security codes to support.

How information is used

We use information to operate accounts, publish projects, deliver downloads, process purchases, prevent fraud, moderate content, communicate service messages, improve reliability, comply with legal obligations, and protect users and the platform.

Cookies and local storage

The website uses essential cookies for sessions, security, preferences, and authentication. Local storage may be used for interface preferences such as theme or project display mode. Optional analytics or advertising tools should be disclosed and configured before they are enabled.

Sharing

Information may be shared with infrastructure, email, authentication, security, payment, and professional service providers when necessary to operate the service. We may also disclose information when required by law or to investigate fraud, security incidents, or rights violations.

Retention

Information is retained only as long as reasonably needed for the purposes described above, including account operation, financial records, dispute handling, moderation, security, backups, and legal compliance. Some records may remain after account closure where retention is required or justified.

Your choices

You may update many profile details through your account. Requests concerning access, correction, deletion, or privacy questions can be sent to privacy@enderhaven.com. Some information cannot be deleted immediately when it is required for transaction records, fraud prevention, disputes, or legal obligations.

Security

We use access controls, password hashing, encrypted secret storage, CSRF protection, rate limiting, and logging. No online system can guarantee absolute security. Report suspected vulnerabilities through the Security Notice.

Changes

This policy may be updated as the service changes. Significant revisions may be announced on the website.